From 046754c3c2610cf075b06cdec3a78fc663447ab0 Mon Sep 17 00:00:00 2001 From: Nikita Pande <37657012+nikita15p@users.noreply.github.com> Date: Wed, 29 Jan 2025 01:27:53 +0530 Subject: [PATCH] [TLS] Remove the hard-coded TLS ciphers in http.go to fix Pen test findings (#98749) Remove the hard-coded TLS ciphers in http.go to fix Pen test findings Signed-off-by: GitHub --- pkg/api/http_server.go | 4 ---- 1 file changed, 4 deletions(-) diff --git a/pkg/api/http_server.go b/pkg/api/http_server.go index 5d2308e7540..21f6f2dcd56 100644 --- a/pkg/api/http_server.go +++ b/pkg/api/http_server.go @@ -796,13 +796,9 @@ func (hs *HTTPServer) getDefaultCiphers(tlsVersion uint16, protocol string) []ui tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, - tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA, tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA, - tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, tls.TLS_RSA_WITH_AES_128_GCM_SHA256, tls.TLS_RSA_WITH_AES_256_GCM_SHA384, - tls.TLS_RSA_WITH_AES_128_CBC_SHA, - tls.TLS_RSA_WITH_AES_256_CBC_SHA, } } if protocol == "h2" {